EUVD-2026-57189
GHSA-xmwg-5p5q-jm2f
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Network-reachable unauthenticated service, no user interaction required; impact is solely partial availability degradation with no confidentiality or integrity effect.
Primary rating from Vendor (fortinet).
CVSS VectorVendor: fortinet
Lifecycle Timeline
3DescriptionCVE.org
A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, FortiOS 7.2 all versions may allow attacker to denial of service via <insert attack vector here>
AnalysisAI
Denial-of-service risk in Fortinet FortiOS across five major version branches (6.4.x through 7.6.6) stems from unbounded resource allocation (CWE-770), allowing unauthenticated remote attackers to degrade availability of affected network appliances. The CVSS temporal metric E:P confirms proof-of-concept exploit code exists, and an official patch is available per Fortinet PSIRT advisory FG-IR-26-162. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The CVSS vector (AV:N/AC:L/PR:N/UI:N) indicates no special prerequisites: exploitation requires only network reachability to the affected FortiOS device, with no authentication, no user interaction, and no elevated complexity. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS base vector AV:N/AC:L/PR:N/UI:N indicates network-reachable, unauthenticated, low-complexity exploitation, though the impact ceiling is low (A:L only - partial availability degradation, no confidentiality or integrity exposure). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the patched FortiOS release for your branch per Fortinet PSIRT advisory FG-IR-26-162 (https://fortiguard.fortinet.com/psirt/FG-IR-26-162); the official fix is confirmed available (CVSS temporal RL:O). … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 an
FortiOS and FortiProxy contain an authentication bypass via the Node.js websocket module allowing unauthenticated remote
A out-of-bounds write in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0
A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, versi
FortiOS SSL-VPN contains an improper authentication vulnerability that allows users to bypass two-factor authentication
Fortinet FortiAnalyzer before 5.0.12 and 5.2.x before 5.2.5; FortiSwitch 3.3.x before 3.3.3; FortiCache 3.0.x before 3.0
Buffer overflow in the Cookie parser in Fortinet FortiOS 4.x before 4.1.11, 4.2.x before 4.2.13, and 4.3.x before 4.3.9
Cross-site scripting (XSS) vulnerability in the sslvpn login page in Fortinet FortiOS 5.2.x before 5.2.3 allows remote a
FortiOS and FortiProxy contain an authentication bypass allowing unauthenticated attackers with knowledge of upstream/do
An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS
Use of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup file may allow an attacke
Arbitrary file write and folder deletion in Fortinet FortiManager, FortiOS, and FortiProxy is possible via a path traver
Same technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today